Re: [PATCH 3/3-v2] security: allow capable check to permit mmap or low vm space

2007-11-26 Thread James Morris
On Mon, 26 Nov 2007, Eric Paris wrote: > On a kernel with CONFIG_SECURITY but without an LSM which implements > security_file_mmap it is impossible for an application to mmap addresses > lower than mmap_min_addr. Based on a suggestion from a developer in the > openwall community this patch adds

[PATCH 3/3-v2] security: allow capable check to permit mmap or low vm space

2007-11-26 Thread Eric Paris
On a kernel with CONFIG_SECURITY but without an LSM which implements security_file_mmap it is impossible for an application to mmap addresses lower than mmap_min_addr. Based on a suggestion from a developer in the openwall community this patch adds a check for CAP_SYS_RAWIO. It is assumed that

[PATCH 3/3-v2] security: allow capable check to permit mmap or low vm space

2007-11-26 Thread Eric Paris
On a kernel with CONFIG_SECURITY but without an LSM which implements security_file_mmap it is impossible for an application to mmap addresses lower than mmap_min_addr. Based on a suggestion from a developer in the openwall community this patch adds a check for CAP_SYS_RAWIO. It is assumed that

Re: [PATCH 3/3-v2] security: allow capable check to permit mmap or low vm space

2007-11-26 Thread James Morris
On Mon, 26 Nov 2007, Eric Paris wrote: On a kernel with CONFIG_SECURITY but without an LSM which implements security_file_mmap it is impossible for an application to mmap addresses lower than mmap_min_addr. Based on a suggestion from a developer in the openwall community this patch adds a